Directories
¶
| Path | Synopsis |
|---|---|
|
Package actorevent emits the actor lifecycle events.
|
Package actorevent emits the actor lifecycle events. |
|
Package actorlock serializes lifecycle RPCs per actor.
|
Package actorlock serializes lifecycle RPCs per actor. |
|
Package actorlog provides structured JSON logging for actor sandboxes shared by the gVisor and micro-VM ateom runtimes.
|
Package actorlog provides structured JSON logging for actor sandboxes shared by the gVisor and micro-VM ateom runtimes. |
|
Package ateapiauth authenticates clients of the ateapi gRPC server, and provides a matching client dial helper.
|
Package ateapiauth authenticates clients of the ateapi gRPC server, and provides a matching client dial helper. |
|
Package ateattr is the single source of truth for substrate's ate.* telemetry attributes: the identity keys stamped on spans/logs, and the bounded value sets used as metric labels.
|
Package ateattr is the single source of truth for substrate's ate.* telemetry attributes: the identity keys stamped on spans/logs, and the bounded value sets used as metric labels. |
|
Package atelet contains shared constants and definitions that are used across Substrate components related to atelet.
|
Package atelet contains shared constants and definitions that are used across Substrate components related to atelet. |
|
Package ateletdial connects a worker Pod to the atelet on its own node over the node-local socket, authenticating both ends by Pod certificate.
|
Package ateletdial connects a worker Pod to the atelet on its own node over the node-local socket, authenticating both ends by Pod certificate. |
|
Package atenet defines the shared contract for Substrate actor networking.
|
Package atenet defines the shared contract for Substrate actor networking. |
|
Package ateomcapacity reports what an ateom can supply to the actors it hosts.
|
Package ateomcapacity reports what an ateom can supply to the actors it hosts. |
|
Package ateomcgroup delegates the worker pod's cgroup to the ateom so each actor can get a leaf of its own.
|
Package ateomcgroup delegates the worker pod's cgroup to the ateom so each actor can get a leaf of its own. |
|
Package ateomnet provides shared networking configuration logic for Substrate runtime agents.
|
Package ateomnet provides shared networking configuration logic for Substrate runtime agents. |
|
Ateom and atelet need to agree on many filesystem paths.
|
Ateom and atelet need to agree on many filesystem paths. |
|
Package ateomstats holds the pieces both ateom runtimes need to answer ateompb.Ateom/GetWorkloadStats.
|
Package ateomstats holds the pieces both ateom runtimes need to answer ateompb.Ateom/GetWorkloadStats. |
|
Package ateomsuspend asks the control plane, through the node-local atelet, to suspend an actor an ateom hosts.
|
Package ateomsuspend asks the control plane, through the node-local atelet, to suspend an actor an ateom hosts. |
|
Package atunnel carries actor ingress and egress through an ateom worker pod.
|
Package atunnel carries actor ingress and egress through an ateom worker pod. |
|
benchmarking
|
|
|
boomer/dynconfig
Package dynconfig fetches and holds the boomer worker's runtime-mutable settings — the subset of locust flags the operator can change in the web UI form.
|
Package dynconfig fetches and holds the boomer worker's runtime-mutable settings — the subset of locust flags the operator can change in the web UI form. |
|
boomer/glutton
Package glutton implements the boomer-Go re-implementation of the GluttonUser locust test (see the legacy Python in benchmarking/locust/tests/glutton.py for the reference behavior).
|
Package glutton implements the boomer-Go re-implementation of the GluttonUser locust test (see the legacy Python in benchmarking/locust/tests/glutton.py for the reference behavior). |
|
boomer/metrics
Package metrics mirrors the Prometheus surface emitted by benchmarking/locust/common/metrics.py — same metric names and labels so dashboards built against the Python locust workers keep working when the load source is a boomer-Go worker.
|
Package metrics mirrors the Prometheus surface emitted by benchmarking/locust/common/metrics.py — same metric names and labels so dashboards built against the Python locust workers keep working when the load source is a boomer-Go worker. |
|
boomer/trace
Package trace wires the OTLP tracer + W3C propagator used by the boomer load-test workers.
|
Package trace wires the OTLP tracer + W3C propagator used by the boomer load-test workers. |
|
glutton
Package glutton implements the benchmarking workload served by cmd/benchmarking/glutton: an API for consuming RAM, disk, and file descriptors, and for gossiping with other glutton instances, over either gRPC or protobuf-over-HTTP.
|
Package glutton implements the benchmarking workload served by cmd/benchmarking/glutton: an API for consuming RAM, disk, and file descriptors, and for gossiping with other glutton instances, over either gRPC or protobuf-over-HTTP. |
|
glutton/fake
Package fake provides an httptest-backed stand-in for a glutton actor.
|
Package fake provides an httptest-backed stand-in for a glutton actor. |
|
Package cdi reads a Container Device Interface spec and resolves what a named set of devices asks a container runtime to do.
|
Package cdi reads a Container Device Interface spec and resolves what a named set of devices asks a container runtime to do. |
|
Package credbundle handles credential bundle files written by Kubernetes Pod Certificates.
|
Package credbundle handles credential bundle files written by Kubernetes Pod Certificates. |
|
Package deviceplugin advertises host device nodes (for example /dev/kvm) to kubelet as extended resources, so a worker pod can be granted just those devices instead of running privileged.
|
Package deviceplugin advertises host device nodes (for example /dev/kvm) to kubelet as extended resources, so a worker pod can be granted just those devices instead of running privileged. |
|
fixtures/probe
command
Command probe is a minimal introspection actor used by the e2e suites.
|
Command probe is a minimal introspection actor used by the e2e suites. |
|
fixtures/testserver
command
Command testserver is the one binary behind every plain helper pod the egress e2e suites stand up.
|
Command testserver is the one binary behind every plain helper pod the egress e2e suites stand up. |
|
Package egresspolicy evaluates an Actor's EgressPolicy against a destination.
|
Package egresspolicy evaluates an Actor's EgressPolicy against a destination. |
|
Package imagecache implements the node-local OCI image cache: a content-addressed pool of unpacked image layers shared by every actor on the node, plus the per-bundle overlay spec that tells the ateom runtimes how to compose an actor rootfs from cached layers.
|
Package imagecache implements the node-local OCI image cache: a content-addressed pool of unpacked image layers shared by every actor on the node, plus the per-bundle overlay spec that tells the ateom runtimes how to compose an actor rootfs from cached layers. |
|
Package installdefaults holds the default namespace and Service names that match the canonical install layout in manifests/ate-install/.
|
Package installdefaults holds the default namespace and Service names that match the canonical install layout in manifests/ate-install/. |
|
Package localca implements a CA whose state can be stored in a local file or Kubernetes secret.
|
Package localca implements a CA whose state can be stored in a local file or Kubernetes secret. |
|
Package localjwtauthority implements a simple "CA" for JWTs.
|
Package localjwtauthority implements a simple "CA" for JWTs. |
|
Package objectstore manages the existence of the objects an external snapshot is made of: listing them, copying them, and deleting them once nothing owns them any more.
|
Package objectstore manages the existence of the objects an external snapshot is made of: listing them, copying them, and deleting them once nothing owns them any more. |
|
objectstoretest
Package objectstoretest provides an in-memory objectstore.Store for tests that need to observe which external snapshots a flow created and released.
|
Package objectstoretest provides an in-memory objectstore.Store for tests that need to observe which external snapshots a flow created and released. |
|
Package ocispec builds the runtime-neutral OCI spec for actor bundles, which each ateom shapes for its runtime.
|
Package ocispec builds the runtime-neutral OCI spec for actor bundles, which each ateom shapes for its runtime. |
|
Package otlprelay carries ateom's OTLP telemetry to the collector over a unix socket served by atelet, so a worker pod needs no network path of its own to export spans, metrics, and log records.
|
Package otlprelay carries ateom's OTLP telemetry to the collector over a unix socket served by atelet, so a worker pod needs no network path of its own to export spans, metrics, and log records. |
|
Package pemutil sanitizes PEM certificate bundles for projection into actors, the way kubelet does for clusterTrustBundle projected volumes.
|
Package pemutil sanitizes PEM certificate bundles for projection into actors, the way kubelet does for clusterTrustBundle projected volumes. |
|
Package portforward tunnels to the pods behind a Service.
|
Package portforward tunnels to the pods behind a Service. |
|
proto
|
|
|
Package protoredact masks the fields of a protobuf message that are marked [debug_redact = true] in the schema, so the message can be logged without exposing the secrets it carries.
|
Package protoredact masks the fields of a protobuf message that are marked [debug_redact = true] in the schema, so the message can be logged without exposing the secrets it carries. |
|
Package roottest gates tests that need root privileges (mounts, mknod, trusted.* xattrs, ...).
|
Package roottest gates tests that need root privileges (mounts, mknod, trusted.* xattrs, ...). |
|
Package serverboot collects the startup boilerplate shared by the long-running substrate server binaries (ateapi, atelet, ateom-gvisor, ateom-microvm): slog wiring, OTel tracer + meter providers, a Prometheus + /readyz HTTP surface, and a couple of small helpers for startup fail-fast.
|
Package serverboot collects the startup boilerplate shared by the long-running substrate server binaries (ateapi, atelet, ateom-gvisor, ateom-microvm): slog wiring, OTel tracer + meter providers, a Prometheus + /readyz HTTP surface, and a couple of small helpers for startup fail-fast. |
|
Package sizing right-sizes a sandbox to the actor's declared resource limits.
|
Package sizing right-sizes a sandbox to the actor's declared resource limits. |
|
Package substratex509 contains routines for creating and parsing x509 certificates that embed Substrate-specific X.509 extensions communicating the identity of a given workload.
|
Package substratex509 contains routines for creating and parsing x509 certificates that embed Substrate-specific X.509 extensions communicating the identity of a given workload. |
|
Package tarutil archives and restores a directory tree as a tar file, preserving the metadata a workload's data directory depends on: modes, ownership, modification times, symlinks, hardlinks, FIFOs, device nodes, and user.* / trusted.overlay.* extended attributes (as PAX SCHILY.xattr records).
|
Package tarutil archives and restores a directory tree as a tar file, preserving the metadata a workload's data directory depends on: modes, ownership, modification times, symlinks, hardlinks, FIFOs, device nodes, and user.* / trusted.overlay.* extended attributes (as PAX SCHILY.xattr records). |
|
Package testenv starts the envtest (kubebuilder) control plane shared by the repo's apiserver-backed test packages.
|
Package testenv starts the envtest (kubebuilder) control plane shared by the repo's apiserver-backed test packages. |
|
Package version exposes build-time identity for substrate binaries.
|
Package version exposes build-time identity for substrate binaries. |
|
Package versionlabel derives the ate.dev/substrate-version label that keys versioned dataplane objects to a substrate build version.
|
Package versionlabel derives the ate.dev/substrate-version label that keys versioned dataplane objects to a substrate build version. |
|
cmd
command
Command cmd prints "<label value> <object-name suffix>" for a build version, so shell installers and upgrade tooling use the same derivation instead of mirroring it.
|
Command cmd prints "<label value> <object-name suffix>" for a build version, so shell installers and upgrade tooling use the same derivation instead of mirroring it. |
|
Package volumepath holds the rule for the relative paths at which substrate projects files into an actor's volumes.
|
Package volumepath holds the rule for the relative paths at which substrate projects files into an actor's volumes. |
|
Package wakeupprobe polls a container's HTTP wakeup endpoint from inside an ateom.
|
Package wakeupprobe polls a container's HTTP wakeup endpoint from inside an ateom. |
Click to show internal directories.
Click to hide internal directories.